Sanitized input via HTTP_HOST